Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: IS/lIe1ENd7W4zlYFc54j1Gkv1wE3q3cV8+NO9Om7Qs=
Subject key identifier: CE:3A:34:18:E1:39:FF:E0:00:A9:76:3F:58:2D:70:1A:D9:DE:3A:47
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 0199239F76C3AFA4093F83D0953925C8BBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 1153
Signing time: Sun 07 Sep 2025 10:01:16 +0000
Manifest this update: Sun 07 Sep 2025 10:01:16 +0000
Manifest next update: Mon 08 Sep 2025 10:01:16 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: +YT8p9dsmY+udqcA1UbZbcEeUqQ13/tKK1j1lGp+EtM=)
2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:76:c3:af:a4:09:3f:83:d0:95:39:25:c8:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Sep 7 10:01:16 2025 GMT
Not After : Sep 8 10:01:16 2025 GMT
Subject: CN=ce3a3418e139ffe000a9763f582d701ad9de3a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:c2:ba:99:29:e6:8e:71:d2:a4:d9:8c:0f:
cf:06:82:e3:ad:22:c1:c3:4e:01:1a:23:03:f5:79:
cc:98:3d:b9:9f:b5:ff:e6:84:7f:cf:ee:f6:f0:81:
9b:e9:2b:3d:7e:4d:66:98:34:1d:02:1c:a5:3e:38:
42:73:63:f2:c9:30:54:00:a0:37:b8:a6:6b:c7:91:
87:e6:7b:03:8a:12:f5:f3:f5:5c:5f:ad:40:c6:4d:
31:b7:ef:ab:5b:f4:af:1c:12:2d:f4:d6:f9:c2:2a:
49:2d:44:7f:0e:6b:b2:fe:26:77:7b:0d:2b:ad:db:
80:cb:46:4a:d9:c7:fa:35:09:9e:e3:08:3e:b8:30:
dd:fc:a7:f0:02:e4:2f:cc:71:33:f3:e7:ea:7d:c9:
af:77:7c:3a:c4:af:f9:6e:fe:90:ab:82:63:1a:c6:
f8:05:2b:04:85:84:dd:a2:78:30:ef:65:6c:ab:41:
b3:f5:a5:bf:60:9d:70:5b:c7:5e:9f:07:69:bc:aa:
57:18:df:ca:58:bc:f1:18:70:bf:72:bb:33:db:d2:
3e:12:81:8f:10:bf:22:ef:56:10:93:94:b0:30:ad:
ba:89:72:e0:73:75:dc:eb:01:63:45:ff:78:71:90:
0a:cd:6b:70:46:44:2c:15:e8:10:4b:fe:45:56:6d:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3A:34:18:E1:39:FF:E0:00:A9:76:3F:58:2D:70:1A:D9:DE:3A:47
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f7:68:df:9b:d4:f9:0a:b0:5e:16:e3:1c:94:e9:a2:c4:12:
d6:a0:39:fd:b7:2a:59:55:d2:f2:a2:2a:cf:01:5e:9c:68:8d:
82:e6:1f:12:9d:9c:1f:bb:a4:c3:50:a1:99:c5:ab:fb:2e:e4:
fb:86:8f:e5:a6:5b:8e:fb:25:08:8d:cd:7d:f7:3b:90:7a:ae:
f8:3f:47:5b:7d:3c:c7:4e:e0:44:18:07:63:53:29:48:10:72:
71:c0:2d:4b:fe:0c:05:56:f0:b7:29:e1:aa:a1:d3:4e:01:43:
15:29:10:67:71:67:42:25:7b:63:1e:dc:88:b3:08:b5:5b:c1:
66:e2:f2:79:78:61:83:cb:3e:83:db:92:7c:a1:b4:c7:83:99:
32:70:33:9c:48:34:06:59:06:c4:49:d8:34:47:d6:0f:03:54:
33:83:bd:66:34:e8:42:b5:b8:7a:5c:b1:64:15:ff:8b:aa:24:
b8:52:d3:56:8a:d8:b4:a7:4a:15:9a:42:92:ee:86:59:f6:9c:
2d:8d:2f:82:ad:5b:6f:c8:48:07:ef:da:4f:c4:0a:0f:04:cc:
a8:44:e1:56:ca:cd:74:00:80:1c:b8:83:a8:79:8a:2e:3b:53:
81:50:0b:23:f6:ee:eb:23:1f:2b:4b:f1:73:37:14:a7:a5:b0:
c5:3f:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:45 2025 by rpki-client